CVE-2024-25327

2024-03-0800:15:49

[email protected]

web.nvd.nist.gov

cve

2024

25327

cross site scripting

xss

vulnerability

justice systems

fullcourt enterprise

remote attacker

arbitrary code

citation search function

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

JSON

Cross Site Scripting (XSS) vulnerability in Justice Systems FullCourt Enterprise v.8.2 allows a remote attacker to execute arbitrary code via the formatCaseNumber parameter of the Citation search function.

References

packetstormsecurity.com/files/177500/FullCourt-Enterprise-8.2-Cross-Site-Scripting.html